Microsoft Warns of Storm-1977 Group Targeting Education Sector with Password Spraying Attacks

Microsoft has issued a warning that the threat group Storm-1977 is targeting the education sector with password spraying attacks. Over the past year, researchers from Microsoft Threat Intelligence have observed this group using AzureChecker.exe to launch attacks against cloud tenants in the education sector. AzureChecker.exe connects to sac-auth[.]nodefunction[.]vip to download AES-encrypted data.